Please refer to the attached image.
Total size: CS2>CS1
For every type of file sizes: CS2 <= CS1
Regards,
Ming
The two are measured at different places and the “Total” is the ground truth. It is measured at the socket level and counts all of the bytes in/out as they are transmitted/read. The content-type breakdown takes the sized for each decoded request and adds them up but it will be missing anything it can’t identify (bug), TLS certificates/overhead and possibly a few other things that don’t come to mind.